cgsecurity.org

Disk boot failure
Windows 10 O/S
Attempting to recover files before reinstallation of O/S
I Removed the disk from the failed platform and set it up as an external drive on another platform.
Disk is recognized in Windows Disk Management => Unallocated
Disk is recognized in TestDisk 7.0 =>
Disk \\.\PhysicalDrive2 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512

Analyse Disk \\.\PhysicalDrive2 - 1000 GB / 931 GiB - CHS 121601 255 63
Current partition structure:
No partition is bootable
...
...
Results
FAT32 0 32 33 33 69 36 532480 [NO NAME]
FAT32, blocksize=4096, 272 MB / 260 MiB
HPFS - NTFS 35 79 45 120082 135 53 1928558592
NTFS, blocksize=4096, 987 GB / 919 GiB
HPFS - NTFS 120082 135 54 120207 118 39 2007040
NTFS, blocksize=4096, 1027 MB / 980 MiB
HPFS - NTFS 120207 118 40 121600 117 53 22378496
NTFS, blocksize=4096, 11 GB / 10 GiB

dir_partition inode=5
HPFS - NTFS 35 79 45 120082 135 53 1928558592
NTFS, blocksize=4096, 987 GB / 919 GiB
Directory /
5 dr-xr-xr-x 0 0 0 23-Oct-2018 14:54 .
5 dr-xr-xr-x 0 0 0 23-Oct-2018 14:54 ..
...
...
343667 dr-xr-xr-x 0 0 0 6-Mar-2018 12:56 Art_Explosion
1301346 dr-xr-xr-x 0 0 0 9-Mar-2018 04:36 CGI-Perl_Cookbk
229114 dr-xr-xr-x 0 0 0 18-Oct-2018 02:57 CS_2.0_WWE_Extras_2
15120 dr-xr-xr-x 0 0 0 9-Jul-2018 15:05 Chemistry
1283483 dr-xr-xr-x 0 0 0 7-Mar-2018 03:09 Common7
...
182516 -r--r--r-- 0 0 51836844478 8-Mar-2018 01:44 F_Ext.rar
182516 -r--r--r-- 0 0 0 8-Mar-2018 01:44 F_Ext.rar
...
Can't create file \/$AV_ASW/$VAULT/vault.db: No such file or directory
ERROR: Couldn't set the file's date and time for \/$AV_ASW/$VAULT
ERROR: Couldn't set the file's date and time for \/$AV_ASW
Can't create file \/$GetCurrent/Logs/downlevel_2018_03_05_16_46_36_677.log: No such file or directory
ERROR: Couldn't set the file's date and time for \/$GetCurrent/Logs
Can't create file \/$GetCurrent/SafeOS/GetCurrentOOBE.dll: No such file or directory
Can't create file \/$GetCurrent/SafeOS/GetCurrentRollback.ini: No such file or directory
...
__________
The listing, Copying of file(s) and 'pasting' to a folder - somewhere before "Results" Step above.

Several thousands of lines rolled out repetitively with "Can't create file \/"... OR "ERROR: Couldn't set the file's date and time for \/"...
Eventually terminating with the image below =>
[img]file:///C:/Users/Joseph/Pictures/Misc/TestDisk.jpg[/img]

and message => Copying, please wait ... 0 OK, ******** failed
__________
Hopefully, someone can tell me what I am doing wrong and advise on corrective steps.

Thanks!

Have you tried to recover the partition itself ? Set the partitions to keep/recover as P(rimary). On next screen, choose Write, confirm, Quit.
After a reboot, run "cmd" (right click run as administrator) and "chkdsk /f d:" (replace d: by the correct drive letter)

I was just scared to do anything that was likely to corrupt the file recovery process. So I am just confirming this.
Thanks again.

Thanks, it worked
But I do have one final question.

As mentioned earlier this was a boot drive in another laptop. The results of the 'Analysis' =>

FAT32 0 32 33 33 69 36 532480 [NO NAME]
FAT32, blocksize=4096, 272 MB / 260 MiB

[ii] HPFS - NTFS 35 79 45 120082 135 53 1928558592
NTFS, blocksize=4096, 987 GB / 919 GiB

[iii] HPFS - NTFS 120082 135 54 120207 118 39 2007040
NTFS, blocksize=4096, 1027 MB / 980 MiB

[iv] HPFS - NTFS 120207 118 40 121600 117 53 22378496
NTFS, blocksize=4096, 11 GB / 10 GiB

This might have reflected the original allocation for a typical HD of this type
System TI1066400J(C) Recovery
1.00 GB NTFS 260 MB 918.82 GB NTFS 933 MB NTFS 10.40 GB NTFS
Healthy (OEM Healthy (EFI System Healthy (Boot, Healthy
Partition) Partition) Page File, Primary Partition) (OEM Partition)

But probably it is =>
272 MB 987 GB 1027 MB 11 GB
? [?] ? ? [ii] ? [iii] ? [iv]
from the recovered data

When I did the recovery I selected the largest partition, i.e. [ii], so the disk is now only a storage device.
Is it possible to restore partitions , [iii] and [iv] to restore the disk to its original state?
Or should it even be considered?
Of course, the partition [?] would be problematic I think!

The reasoning behind this hypothetical proposition is for the avoidance of doing a clean Win10 installation,
even though the Windows folder is there (questionable completeness etc), I am assuming that the registry, sys,
hive etc. and the like would have been lost. To do a clean re-installation of Win10 will also mean a
reinstallation of a whole lot of software which I would rather avoid.

Unless of course there is an alternative route unknown to me - ENLIGHTENMENT sought!
Thanks.

PS: Actual formatted structure of the recovered disk

Recovered(E)
227 MB 919.61 GB NTFS 11.63 GB
Unallocated Healthy Unallocated
(Primary Partition)

Sorry - tabs & multiple spaces are not adequately implemented to display tables ?